Importing SSL cert into PALOALTO Firewall

[SamerSaleem]

Hi,

I am facing problem when I import the 3rd party generated ssl cert into firewall, for example:

I generated the certificate locally on firewall and named it as mycert and when I exported it, it was named automatically to cert-mycert.csr

after generating the 3rd party key and downloaded locally to my PC, the name of the new certs are on default random naming.

usually I get 3 files: (.pem, .csr) file types.

when I import them, the certificate does not seem to change from pending state.

can anyone help please? I know that there is some kind of specific naming process but dont know what exactly to do and on which cert file?

[Raido_Rattameister · Accepted solution]

When you import cert in you need to give it same name as your CSR is in the firewall. For example "mycert" as you mentioned in your case.

[SamerSaleem]

so not the name that was saved on my local drive which is exported to "cert-mycert.csr" automatically?

[Adrian_Jensen · Accepted solution]

---

@SamerSaleem wrote:

so not the name that was saved on my local drive which is exported to "cert-mycert.csr" automatically?

---

When you first created the certificate signing request (CSR), you clicked the "Generate" button and then entered a name under "Certificate Name:". When you import the signed certificate click the "Import" button and then enter the same name under "Certificate Name:", and then select whatever filename you have on your desktop (the filename doesn't matter, just the certificate object name). The PaloAlto will automatically match the signed certificate to the previously generate CSR by the same name.

The signed certificate need to be a base64-encoded PEM file (either .pem or .cer typically), not a "Windows binary" PEM file. You can open it in notepad and you should see something like:

-----BEGIN CERTIFICATE-----
un098n3rimc09n8mricn93imc9imdcin39j83r03c3d
9ijc9crm93mc9r93m9c8m3mc39mr3f9mr09r0c9irm8
c0948j984j0f0984098j03f08r3mf098j3rmf9843jr
m498j40m984jf048jf0984jrf984kjr9fk4r09fk===
-----END CERTIFICATE-----

[emiratesevisaonline]

How to import SSl certificate for my website www.emiratesevisaonline.com

[Adrian_Jensen]

How did you generate a SSL certificate?